Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tailscale raises $100M

tailscale.com

Post reply on HN
Print view View original

431–440 of 468 posts

Re: Tailscale raises $100M

#431

Post by Aeolun »

web007 wrote: post #180
arsome wrote: post #124

I was going to try TailScale but then it seemed the only option to do so as an individual was to login with a 3rd party cloud provider, which I in no way want tied into my networks. I gave up and just setup wireguard directly instead, I don't trust Tailscale either if that's their attitude towards privacy, it's permanently marred my vision of their product.

Your personal dislike of cloud SSO is not the same as "their attitude towards privacy". Before you do anything "permanently" you should read their reasoning behind that decision: https://tailscale.com/kb/1013/sso-providers/ > Tailscale works on top of the SSO/IDP/IAM identity provider you or your company already use. > We don’t support sign-up with email addresses. By design, Tailscale is not an identity provider: th…

> You can BYO SAML provider if you like, you'll just have to pay for it

Their website makes it seem like you can do SSO/MFA with even the free personal plan though. If you cannot integrate with your SSO provider then that's just marketing bullshit.

What they should really put there is "Can only sign in with Google/Github/Microsoft account".

Re: Tailscale raises $100M

#432

Post by PinguTS »

gzer0 wrote: post #137
siavosh wrote: post #130

Earlier quoted context omitted.

I’m pretty ignorant on this topic, but what are the benefits of having a personal VPN?

I am able to route traffic on my mobile device through my home network via the use of their "exit node" option. It allows one of my home devices to act as an exit node for my entire personal tailscale network. This serves multiple benefits: the main one being that I receive pi-hole filtered ad-free traffic on my mobile device via a Wireguard VPN with my home IP 24/7/365

So then, whats is the difference to run OpenConnect and then connecting to it via activating CiscoVPN on the phone/mobile device?

I used that while I was in China as this allowed me to have my own personal VPN.

Re: Tailscale raises $100M

#433

Post by dx034 »

zellyn wrote: post #267
zepearl wrote: post #188

Earlier quoted context omitted.

So basically Wireguard with automated key setup/distribution/identity management? (btw. I love Wireguard - currenly using it to route traffic between my servers + transfer media between my home and my mother's mediacenter with both PCs being behind their own router - she loves it too as so far there were no problems hehe)

That, plus fanatically good NAT Traversal: https://tailscale.com/blog/how-nat-traversal-works/

A bit offtopic, but how did they create the visualizations? Do they have a designer on their team for that or is there any good tool that creates charts like these?

Re: Tailscale raises $100M

#434

Post by SergeAx »

polote wrote: post #327
nickysielicki wrote: post #111

Tailscale has a fantastic product, I’ve been extremely happy from day one. If you’re waiting for a weekend to have a few hours to try out Tailscale, don’t, it takes 15 minutes to get every device you own up and running and talking. This is the lowest friction personal VPN to ever exist, and once you see how easy it is for your own devices, you’ll wish you had it at work. The biggest risk that this company has is that…

> The biggest risk that this company has is that Cloudflare (in all reality) should just buy them or reimplement it. It’s the type of product cloudflare would make, that’s for sure. The same thing is being said on HN about all kind of network software, but tell me one software that Cloudflare is really known for except its cdn ? None. HN is really a strong echo chamber and some people believe Cloudflare and Stripe ar…

CloudFlare has a world best DNS system, and if you are still using another DNS provider - I wholeheartedly recommend to switch ASAP.

Re: Tailscale raises $100M

#435

Post by legalcorrection »

dave_universetf wrote: post #210
legalcorrection wrote: post #57

Earlier quoted context omitted.

This is kind of overstated. Even if everyone went IPv6 and gave every device a public IP address, pretty much every network would have a firewall that behaved just like NAT.

Our epic treatise on how NAT traversal works (in general, not specific to Tailscale) mentions this. IPv6 greatly reduces the amount of pain for p2p connections, but does not eliminate some of the fundamentals (stateful firewall traversal) if you want it to be zero-config: https://tailscale.com/blog/how-nat-traversal-works/ But until deployment hits 100%, and until ISPs start caring about IPv6 reliability the way they…

Very cool write-up. Thank you all for writing (and linking) it.

Re: Tailscale raises $100M

#436

Post by deadbunny »

jjeaff wrote: post #297
_ktx2 wrote: post #83

Earlier quoted context omitted.

1Password went from being buy once upgrade forever to SaaS. A lot of folks bought back when that was the package (and business model) so it's viewed relatively negatively here from some folks. I don't blame them, but also, I think 1Password is a success. I just don't think they'd have been viable under their original business model.

But is "buy once, upgrade forever" really a viable long term business model?

Seemed to work for a lot software before SaaS ate the world. But who wants viable when you can bleed you customers for 10-1000x the would have paid for the software once? /s

Re: Tailscale raises $100M

#437

Post by dovholuknf »

nickysielicki wrote: post #111

Tailscale has a fantastic product, I’ve been extremely happy from day one. If you’re waiting for a weekend to have a few hours to try out Tailscale, don’t, it takes 15 minutes to get every device you own up and running and talking. This is the lowest friction personal VPN to ever exist, and once you see how easy it is for your own devices, you’ll wish you had it at work. The biggest risk that this company has is that…

You don't need to dream about it. You can absolutely do this today with OpenZiti. You just need to be able to set it up which is - imo (I am a dev on the project and wrote the quickstarts) just as easy to get up and running as anything. I do it in "under a minute" but I work on the project so my timing is not fair... :)

You can find information about it over at https://openziti.github.io/ you don't even need to trust the software itself. You can add a 3rd party certificate to the server and mint your own private keys/certs and deliver them to your friends and have 100% control over where and how and whom you trust. You control access down to individual services, not CIDR blocks, not IP addresses. You can embed the sdks into any of your own apps if you're into that sort of thing. :) you could setup a relay server in some cloud provider for the 'untrusted' traffic (hmmmm you make me wonder if we could integrate with tor somehow now too...)

Seems like it'd do most/much of the things you want it to. I'd be happy to help you out. We have a discourse you can post questions to.

Re: Tailscale raises $100M

#439

Post by PLG88 »

ncmncm wrote: post #81
boesboes wrote: post #12

For anyone else who wonders wtf tailscale is: > Tailscale is a VPN service that makes the devices and applications you own accessible anywhere in the world, securely and effortlessly. It enables encrypted point-to-point connections using the open source WireGuard protocol, which means only devices on your private network can communicate with each other. It seems to take care of key distribution, nat-traversal, authen…

I thought that Tailscale was pretty interesting. Avery Pennarun, its CTO, is somebody whose judgment I am used to trusting. Then I learned that to use it, I would be dependent on authenticating using a login on one of the unaccountable internet behemoths who could take away my account for any random reason or no expressed reason at all. No, thank you.

You should checkout the opensource project OpenZiti (https://openziti.github.io/). It has its own internal PKI system so you dont need to (but can) like to an external 3rd party. It also allows you to close all inbound ports and link listeners (as every endpoint has embedded identity so makes outbound only connections) and can be embedded directly into apps with SDKs as well as deploy on any popular OS or as a virtual appliance.

Re: Tailscale raises $100M

#440

Post by PLG88 »

aborsy wrote: post #179
arsome wrote: post #124

I was going to try TailScale but then it seemed the only option to do so as an individual was to login with a 3rd party cloud provider, which I in no way want tied into my networks. I gave up and just setup wireguard directly instead, I don't trust Tailscale either if that's their attitude towards privacy, it's permanently marred my vision of their product.

I don’t understand why these mesh VPN companies don’t take themselves out of the trust loop? For example, by supporting Wireguard preshared keys (if that makes sense). In light of the recent incidence at Okta, the risk of the VPN company or the identity provider getting compromised, or provided with a gag order by the government, should be accounted for.

You should checkout the opensource project OpenZiti (https://openziti.github.io/). It has its own internal PKI system so you dont need to (but can) like to an external 3rd party. It also allows you to close all inbound ports and link listeners (as every endpoint has embedded identity so makes outbound only connections) and can be embedded directly into apps with SDKs as well as deploy on any popular OS or as a virtual appliance.

Our opinion of zero trust is that you should not have to trust us. Thats why we made is open source and with its own internal identity system. The only things you need to trust are the controller (which uses your CA/PKI) and the code (which you can audit).

Post reply on HN